$ rpki-client -vvf repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft File: 9F1E176A521C3CEFE1D787F898211547A2D65955.mft (raw, json) Hash identifier: gyHPvghBMJ6iEu+vm1Lm6vtFvPWf6SXha0FLNstqR/Y= Subject key identifier: 5A:3E:48:18:F0:30:45:0A:43:63:8C:05:AA:77:6B:1F:EE:67:B2:DA Authority key identifier: 9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55 Certificate issuer: /CN=9F1E176A521C3CEFE1D787F898211547A2D65955 Certificate serial: 4796744BBA35A020517CE3B69868A8E8046B3C0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft Manifest number: B5 Signing time: Fri 29 Nov 2024 07:01:30 +0000 Manifest this update: Fri 29 Nov 2024 06:56:30 +0000 Manifest next update: Mon 02 Dec 2024 10:54:30 +0000 Files and hashes: 1: 3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (hash: aKEsgE6H2Q6MjQcVkyp/z8tGgi8bnF/5scXJTaxQ5O4=) 2: 3130332e37382e3233322e302f32322d3232203d3e203634333032.roa (hash: pe62LiojXyM7gYicjmgnqk2m0Gdqr7TylPQuh7SdFnU=) 3: 9F1E176A521C3CEFE1D787F898211547A2D65955.crl (hash: gSwTfgaDWDNYvpwmqYcv10vVOltSKvF98tExhlOaRC4=) 4: 3130332e37382e3233352e302f32342d3234203d3e203634333032.roa (hash: NbBYk657nhFcWyfIb4SK1Hr5N01903qmNQrNmHuRDKc=) 5: 3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (hash: 3xpIJX5oINXJUPuBkhUbqHuDByu9ZULCKQ7tzsRwqDk=) 6: 323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa (hash: 7c1sfMcrfO93nFfMchi4QHV2HKxCNeAUSMnzGqAyt9Q=) 7: 3130332e37382e3233332e302f32342d3234203d3e203634333032.roa (hash: 7vbMiozb3uHTPyIGLruw8yBs7XhAiHnr0tqrwOMZY8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 22:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:96:74:4b:ba:35:a0:20:51:7c:e3:b6:98:68:a8:e8:04:6b:3c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F1E176A521C3CEFE1D787F898211547A2D65955 Validity Not Before: Nov 29 06:56:30 2024 GMT Not After : Dec 2 10:54:30 2024 GMT Subject: CN=5A3E4818F030450A43638C05AA776B1FEE67B2DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a9:30:7c:a7:1b:f9:d4:e3:8b:db:19:15:dd: d0:47:c1:2c:09:33:92:82:bf:af:32:8f:ad:9f:8c: 84:a2:4e:95:f1:92:28:d7:b9:0c:c0:8d:12:86:2a: da:c4:34:aa:68:ab:5a:a9:89:73:f8:41:8d:cb:45: 0b:62:b6:68:31:39:af:b3:08:07:eb:ba:88:25:45: 4d:d3:d5:9c:7c:c8:c5:4f:06:dd:51:0a:4b:73:4d: 9f:ea:31:36:c1:39:80:55:a3:37:a0:31:e5:9c:13: 37:e4:f7:bc:a4:9b:41:a2:5c:8c:ae:0a:1b:db:d7: 6a:9e:03:3b:21:68:42:d3:a2:dd:85:6e:e5:4e:f9: aa:72:16:08:18:4d:28:24:fc:7b:4d:c1:5d:e3:f8: 2f:81:e1:50:9b:21:46:b4:ac:89:1d:a0:5a:22:aa: 60:cd:f1:f7:a1:c0:0b:c9:70:ec:f4:c1:67:2d:0a: e9:7e:b9:2e:83:15:46:ad:01:37:16:d7:d6:70:df: 18:26:6c:77:5c:f7:73:bd:0a:3d:f8:12:64:e9:5f: a4:94:34:99:96:5d:05:10:e2:44:45:7f:8a:73:b3: 8e:81:2b:72:12:3e:b6:1e:74:c2:f9:19:93:b4:bf: 81:0b:7a:c5:9b:64:41:df:b6:c8:3e:a5:ac:7a:bd: 2b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3E:48:18:F0:30:45:0A:43:63:8C:05:AA:77:6B:1F:EE:67:B2:DA X509v3 Authority Key Identifier: keyid:9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:49:72:ec:56:ad:49:cb:bc:6e:ad:fa:68:9b:9e:be:b8:39: 8e:0c:48:a6:d3:4c:1a:e3:fa:3e:03:99:f6:c0:00:89:cb:28: b4:c6:3c:cc:33:e9:cf:dc:ce:36:31:ed:dc:99:4d:90:49:38: 52:b6:b1:ef:5c:d9:8c:3c:22:b3:3e:78:a5:f5:86:74:ee:9f: 43:e1:0b:d2:53:e7:16:e6:61:39:c5:e9:a6:12:61:c6:d0:e3: be:63:96:50:b7:46:69:f0:85:06:f5:32:fb:b2:c3:cf:80:db: 5c:22:53:7a:d3:1f:e6:7c:95:ea:4b:38:c4:16:db:d8:c9:f2: 8e:c7:b1:c4:b7:f5:40:db:fe:9a:cd:88:b4:71:19:7c:d3:2c: 52:0d:85:4a:8d:ad:32:e0:ce:07:6b:70:67:44:3d:42:36:2d: a2:c1:d0:5f:28:03:6f:9c:25:1b:60:7f:ee:0b:b1:db:0c:be: 87:11:bc:22:92:0f:90:cf:23:33:35:40:f6:71:5a:62:fd:12: 37:6a:da:f2:25:6d:11:92:c6:9b:f7:66:81:cf:48:30:00:bf: 6f:c6:54:2e:0b:8a:49:2b:8e:59:f7:16:e4:00:36:12:b0:9f: bd:13:e0:0e:35:3f:80:f6:67:6e:cc:ff:1e:14:34:ec:6a:74: 76:26:0b:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR5Z0S7o1oCBRfOO2mGio6ARrPA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1NDdB MkQ2NTk1NTAeFw0yNDExMjkwNjU2MzBaFw0yNDEyMDIxMDU0MzBaMDMxMTAvBgNV BAMTKDVBM0U0ODE4RjAzMDQ1MEE0MzYzOEMwNUFBNzc2QjFGRUU2N0IyREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMqTB8pxv51OOL2xkV3dBHwSwJ M5KCv68yj62fjISiTpXxkijXuQzAjRKGKtrENKpoq1qpiXP4QY3LRQtitmgxOa+z CAfruoglRU3T1Zx8yMVPBt1RCktzTZ/qMTbBOYBVozegMeWcEzfk97ykm0GiXIyu Chvb12qeAzshaELTot2FbuVO+apyFggYTSgk/HtNwV3j+C+B4VCbIUa0rIkdoFoi qmDN8fehwAvJcOz0wWctCul+uS6DFUatATcW19Zw3xgmbHdc93O9Cj34EmTpX6SU NJmWXQUQ4kRFf4pzs46BK3ISPrYedML5GZO0v4ELesWbZEHftsg+pax6vStNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWj5IGPAwRQpDY4wFqndrH+5nstowHwYDVR0j BBgwFoAUnx4XalIcPO/h14f4mCEVR6LWWVUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGRlOGZiOC0zYTc3LTQ4N2UtOWRmYy1mNDc5ZDZiMzM4MDkvMC85RjFFMTc2QTUy MUMzQ0VGRTFENzg3Rjg5ODIxMTU0N0EyRDY1OTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1NDdBMkQ2 NTk1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRkZThmYjgtM2E3Ny00ODdlLTlk ZmMtZjQ3OWQ2YjMzODA5LzAvOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1 NDdBMkQ2NTk1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZJcuxWrUnLvG6t+mibnr64OY4MSKbTTBrj +j4DmfbAAInLKLTGPMwz6c/czjYx7dyZTZBJOFK2se9c2Yw8IrM+eKX1hnTun0Ph C9JT5xbmYTnF6aYSYcbQ475jllC3RmnwhQb1Mvuyw8+A21wiU3rTH+Z8lepLOMQW 29jJ8o7HscS39UDb/prNiLRxGXzTLFINhUqNrTLgzgdrcGdEPUI2LaLB0F8oA2+c JRtgf+4LsdsMvocRvCKSD5DPIzM1QPZxWmL9Ejdq2vIlbRGSxpv3ZoHPSDAAv2/G VC4Likkrjln3FuQANhKwn70T4A41P4D2Z27M/x4UNOxqdHYmC7E= -----END CERTIFICATE-----Generated at Fri Nov 29 08:51:55 2024 by rpki-client on console-fra.rpki-client.org